PR lib/60219 -- Fix sysconf(_SC_TZNAME_MAX)
That value is supposed to be the minimum value allowed for
the maximum length of a timezone abbreviation. It cannot
be something larger than is allowed for that (and NAME_MAX
has nothing to do with it)
It defines the max lengths allowed for the words in
TZ=Frankenstein-7Monster-6[transition rules]
in old style POSIX TZ variable settings - the POSIX required
minimum value is 6 (so "Frankenstein" would not fit in a minimalist
POSIX implementation).
For now, sync the values between libc/sysctl() and libc/localtime()
via a new _TZNAME_MAXIMUM definition in <time.h> and use that for
both purposes (as a possible default anyway for localtime() - there
the default value used will always be at least 254, and building with
[8 lines not shown]
devel/difftastic: update to 0.69.0
Parsing
- Added support for Assembly.
- Substantially improved parsing for Perl.
- Improved parsing for Clojure, Common Lisp, CSS, Dart, Erlang, F#, OCaml, Python, Rust, Scala, TypeScript and VHDL.
- Removed support for Hack, as the upstream parser is no longer maintained. .php files starting with <?hh are now treated as text.
File Detection
- Difftastic now considers .gitattributes when deciding if a file is binary, recognising both the -text and binary attributes.
Build
- Difftastic now requires Rust 1.85 or later to build.
gobject-introspection: bump PKGREVISION for glib2 2.88.0 update
gobject-introspection installs GLib/GObject/GModule/Gio/GioUnix
introspection data generated against the GLib version available at
build time.
After updating devel/glib2 to 2.88.0, the old gobject-introspection
package still contains typelibs generated against the previous GLib.
This can break runtime users of PyGObject like inputmethod/ibus-anthy.
nvmm: Don't report physical lapic freq as virtual lapic freq.
The virtual lapic emulated by qemu in software always ticks at 1 GHz,
but the physical lapic on my laptop, for example, ticks at 24 MHz.
In order for this to work as iMil intended, we need some way for the
hypervisor (such as qemu) to tell nvmm what its lapic frequency is.
Until we have that, we can't correctly report any alleged lapic
frequency to the guest.
PR kern/59424: hardclock ticks run at breakneck pace under qemu
net/unison: Update to 2.54.0
Packaging changes:
Upstream NEWS:
## Changes in 2.54.0
Released 2026-05-01
* Drop old wire protocol. Unison will no longer interoperate with
versions before 2.52.0 and will no longer read pre-2.52.0 archive
files.
* Document that LLM output is unwelcome in the Unison project (code,
issues, mailinglists, etc.).
* Add desktop file.
Deprecation warning: support for external rsync will be removed;
[13 lines not shown]
geography/py-ubx2: Update to 1.3.0
Upstream NEWS, less minor improvements and bugfixes:
### RELEASE 1.3.0
1. Add support for UBX MGA advanced calibration support commands and polls (MGA-SF-INI, MGA-SF-INI2, MGA-INI-ATT, MGA-SF) - thanks to @ariansharifi for contribution.
### RELEASE 1.2.60
1. Add UBXReader `encoding` argument for chunked encoded socket streams.
1. Add a third value '2' to UBXReader and UBXMessage `parsebitfield` argument (*previously a simple boolean*); 0 = parse bitfield as bytes, 1 = parse bitfield as individual bits, 2 = parse bitfield as *both* bytes *and* bits (1)
t_sha512trunc.c: add some more test cases
These were randomly selected (biased for size) from the same source as
the original ones. If still more are needed, reading from an input file
would be the better (or, size-wise only) option, but this is simpler
as-is.
t_sha512trunc.c: fix test case iteration
The code in check() was repeatedly running the first element of the array
of test cases, rather than iterating. (Noted by human-powered code
inspection while preparing another commit that will follow shortly.)
firefox140: update to 140.10.1
Mozilla Foundation Security Advisory 2026-36
Security Vulnerabilities fixed in Firefox ESR 140.10.1
Announced
April 28, 2026
Impact
high
Products
Firefox ESR
Fixed in
Firefox ESR 140.10.1
#CVE-2026-7320: Information disclosure due to incorrect boundary conditions in the Audio/Video component
Reporter
Xuehao Guo
[45 lines not shown]
